4a906be1ea8dda4e3f7c237c4b5655c2be2dbed91dd49972e206f3614d121996 | Triage™

Login
Reports

Overview

overview

Static

static

3

4a906be1ea...96.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
4a906be1ea8dda4e3f7c237c4b5655c2be2dbed91dd49972e206f3614d121996
Size 1.5MB
Sample260827-thrn3sxfjg
SHA256 4a906be1ea8dda4e3f7c237c4b5655c2be2dbed91dd49972e206f3614d121996
MD5 cb6595baf6e0b0e9e4256f72e5262e5c
SHA1 48134baf1672e1a7b19f39c4cd2807fd0aaa2409
SHA512 51cfcc6404748e27de49f29c91eb5c02dfaf1c69a2ec74d8ba6c5a84185a1230cebfd87abf616785a512de1c1335ff8e94442ee28a5f435c44890a5fdd1e5293
SSDEEP 24576:H9WXJ9/XOkqmTsOMiSwMnN4iwFcEKKYJkwrsrIZmDi:H9WXJ9/+kqCsRrwENCIYcMi
TLSH
T1BF655D0163924077D0622574856ABBA44364BFB43F23D1ABFF54394AFE72BC159332BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4a906be1ea8dda4e3f7c237c4b5655c2be2dbed91dd49972e206f3614d121996.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  4a906be1ea8dda4e3f7c237c4b5655c2be2dbed91dd49972e206f3614d121996
- Size 1.5MB
- SHA256 4a906be1ea8dda4e3f7c237c4b5655c2be2dbed91dd49972e206f3614d121996
- MD5 cb6595baf6e0b0e9e4256f72e5262e5c
- SHA1 48134baf1672e1a7b19f39c4cd2807fd0aaa2409
- SHA512 51cfcc6404748e27de49f29c91eb5c02dfaf1c69a2ec74d8ba6c5a84185a1230cebfd87abf616785a512de1c1335ff8e94442ee28a5f435c44890a5fdd1e5293
- SSDEEP 24576:H9WXJ9/XOkqmTsOMiSwMnN4iwFcEKKYJkwrsrIZmDi:H9WXJ9/+kqCsRrwENCIYcMi
- TLSH
  T1BF655D0163924077D0622574856ABBA44364BFB43F23D1ABFF54394AFE72BC159332BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery execution persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy